CVE-2021-32942

The CVE-2021-32942 vulnerability affects AVEVA InTouch Runtime (WindowViewer) prior to and including 2020 R2, where a privileged, authorized user who creates a diagnostic memory dump to a non-protected location can cause cleartext credentials to be exposed. Root cause: information disclosure thro...

CVE-2018-10628

Affected software: AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2. Vulnerability: Stack-based buffer overflow (CWE-121) in InTouch View when unauthenticated packets are sent to a locale that does not use a dot as the decimal separator. Impact: ...